This article provides information to help administrators troubleshoot issues with Citrix Workspace app.


You might come across the following connection issues.

ICA launch Fedora 29/30

ICA launch might fail on Fedora 29/30. As a workaround, follow the steps:

  1. Install compat-openssl10 by using the command.

    sudo yum install compat-openssl10.x86_64

  2. Set the environment variable in ~/.bashrc to load for every session. This action points to the older libcrypto library.

    export LD_PRELOAD=/lib64/


Citrix Workspace app works fine in the X.Org server as compared to the Wayland compositor. For distributions that have Wayland as the default graphics protocol, uncomment either of the following:

WaylandEnable=false in /etc/gdm/custom.conf or in /etc/gdm3/custom.conf

Sign out and sign in to point to the X.Org server.

Published resource or desktop session

When establishing a connection to a Windows server, if a dialog box appears with the message “Connecting to server…” but no connection window appears later, you might need to configure the server with a Client Access License (CAL). For more information about licensing, see Licensing.

Session reconnection

The connection might fail when reconnecting to a session with a higher color depth than that the Citrix Workspace app requires. This failure occurs when running out of available memory on the server.

If the reconnection fails, Citrix Workspace app tries to use the original color depth. Otherwise, the server tries to start a new session with the requested color depth, leaving the original session in a disconnected state. The second connection might also fail if there’s still a lack of available memory on the server.

Full Internet name

Citrix recommends that you configure DNS (Domain Name Server) on your network. This configuration enables you to resolve the names of servers to which you want to connect. If you do not have DNS configured, it might not be possible to resolve the server name to an IP address. Instead, you can specify the server by its IP address, rather than by its name. TLS connections require a fully qualified domain name, not an IP address.

Slow sessions

If a session does not start until you move the mouse, there might be a problem with random number generation in the Linux kernel. As a workaround, run an entropy-generating daemon such as rngd (which is hardware-based) or haveged (from Magic Software).

Cipher suites

If your connection fails with the new cryptographic support:

  1. You can use various tools to check the cipher suites that your server support, including:
    • (requires the server to have Internet access)
    • sslyze (
  2. In Linux Client WireShark, find the packet (Client Hello, Server Hello) with the filter (ip.addr == VDAIPAddress) to find the SSL section. The result has the cipher suites sent by the client and accepted by the server.

Incorrect Citrix Optimization SDK

The Citrix Optimization SDK package includes an incorrect version of the As a workaround, do the following:

  1. Download Citrix Optimization SDK package version 18.10 from the Downloads page.

    1. Go to the path CitrixPluginSDK/UIDialogLib/GTK:

      cd CitrixPluginSDK/UIDialogLib/GTK

    2. Delete all the object files:

      rm -rf *.o

    3. Go to WebKit folder:

      cd ../WebKit

    4. Remove the existing

      rm -rf

    5. Use the following command in the WebKit directory:

      make all

      The new is generated.

    6. Copy the new library into the $ICAROOT/lib directory.

Weak cipher suites for SSL connections

When making a TLS connection, the Citrix Workspace app offers an advanced and restricted set of cipher suites by default.

If you’re connecting to a server that requires an older cipher suite, set the configuration option SSLCiphers=ALL in the [WFClient] section of a configuration file.

The following advanced cipher suites are supported:

  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030), ALL, GOV
  • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028), ALL, GOV

Loss of connection

When using the EDT protocol, you might see the error message: Connection to “…” has been lost. This issue might occur when the connection goes through a router with a Maximum Transmission Unit for EDT that is smaller than the default of 1,500 bytes. Do the following:

  • Set edtMSS=1000 in a configuration file.

Connection errors

Connection errors might produce various different error dialogs. Examples are:

  • Error in connection: A protocol error occurred while communicating with the Authentication Service
  • The Authentication Service cannot be contacted
  • Your account cannot be added using this server address

Some problems might cause such errors, including:

  • When the local computer and the remote computer can’t negotiate a common TLS protocol. For more information, see TLS.
  • When the remote computer requires an older cipher suite for a TLS connection. In this case, you can set the configuration option SSLCiphers=ALL in the \[WFClient\] section of a configuration file and run killall AuthManagerDaemon ServiceRecord selfservice storebrowse before restarting the connection.
  • When the remote computer requests a client certificate inappropriately. IIS must only accept or require certificates for Citrix, Authentication, and Certificate.
  • Other problems.

Low-bandwidth connections

Citrix recommends you use the latest version of Citrix Virtual Apps and Desktops or Citrix DaaS (formerly Citrix Virtual Apps and Desktops service) on the server. Also, the use the latest Citrix Workspace app on the user device.

If you’re using a low-bandwidth connection, you can change your Citrix Workspace app configuration and the way you use Citrix Workspace app to improve performance.

  • Configure your Citrix Workspace app connection - Configuring your Citrix Workspace app connections can reduce the bandwidth that ICA requires and improves performance
  • Change how Citrix Workspace app is used - Changing the way Citrix Workspace app is used can also reduce the bandwidth required for a high-performance connection
  • Enable UDP audio - This feature can maintain consistent latency on congested networks in Voice-over-IP (VoIP) connections
  • Use the latest versions of Citrix Workspace app for Linux and Citrix Virtual Apps and Desktops or Citrix DaaS - Citrix continually enhances and improves performance with each release, and many performance features require the latest Citrix Workspace app and server software


Screen tearing

Screen tearing occurs when parts of two (or more) different frames appear on the screen at the same time, in horizontal blocks. This issue is most visible with large areas of fast changing content on screen.

Tearing is avoided when data is captured at the VDA. Tearing isn’t introduced when data is passed to the client. However, X11 (the Linux/Unix graphics subsystem) does not provide a consistent way to draw to the screen in a way that prevents tearing.

To prevent screen tearing, Citrix recommends the standard approach which synchronizes application drawing with the drawing of the screen. That is, wait for vsvnc, to start the drawing of the next frame. Depending on the graphics hardware on the client and the window manager you’re using, the following two groups of solutions are available to prevent screen tearing:

  • X11 GPU settings
  • Use a Composition Manager

X11 GPU Configuration

For Intel HD graphics, create a file in the xorg.conf.d called 20-intel.conf with the following contents:

Section "Device"

 Identifier    "Intel Graphics"
 Driver        "intel"
 Option        "AccelMethod" "sna"
 Option        "TearFree" "true"


For NVIDIA graphics, locate the file in the xorg.conf.d folder that includes the “MetaModes” Option for your configuration. For each comma-separated MetaMode used add the following:

{ForceFullCompositionPipeline = On}

For example:

Option “MetaModes” “DFP-0: 1920x1200 +0+0 {ForceFullCompositionPipeline = On}”


Different Linux distributions use different paths to xorg.conf.d, for example, /etc/X11/xorg.conf.d, or, /user/share/X11/xorg.conf.d.

Composition managers

Use the following:

  • Compiz (built into Ubuntu Unity). Install the “CompizConfig Settings Manager.”

    Run “CompizConfig Settings Manager”.

    Under General > Composition clear Undirect Fullscreen Windows.


Use “CompizConfig Settings Manager” with caution because incorrectly changing values can prevent the system from launching.

  • Compton (an add-on utility). Refer to the main page/documentation for Compton for full details. For example, run the following command:

    compton --vsync opengl --vsync -aggressive

Incorrect keystrokes

If you’re using a non-English language keyboard, the screen display might not match the keyboard input. In this case, you must specify the keyboard type and layout that you’re using. For more information about specifying keyboards, see Control keyboard behavior.

Excessive redrawing

Some window managers continuously report the new window position when moving seamless windows, which can result in excessive redrawing. To fix this problem, switch the window manager to a mode that draws only window outlines when moving a window.

Icon compatibility

The Citrix Workspace app creates window icons that are compatible with most window managers. However, these icons aren’t fully compatible with the X Inter-Client Communication Convention.

Full icon compatibility

To provide full icon compatibility:

  1. Open the wfclient.ini configuration file.
  2. Edit the following line in the [WFClient] section: UseIconWindow=True
  3. Save and close the file.

Cursor color

The cursor can be difficult to see if it’s the same or similar in color to the background. You can fix this issue by forcing areas of the cursor to be black or white.

To change the color of the cursor

  1. Open the wfclient.ini configuration file.

  2. Add one of the following lines to the [WFClient] section:

    CursorStipple=ffff,ffff (to make the cursor black)

    CursorStipple=0,0 (to make the cursor white)

  3. Save and close the file.

Color flash

When you move the mouse into or out of a connection window, the colors in the non-focused window start to flash. This issue is a known limitation when using the X Windows System with PseudoColor displays. If possible, use a higher color depth for the affected connection.

Color changes with TrueColor display

Users have the option of using 256 colors when connecting to a server. This option assumes that the video hardware has palette support to enable applications to change the palate colors to produce animated displays.

TrueColor displays have no facility to emulate the ability to produce animations by rapidly changing the palette. Software emulation of this facility is expensive for time and network traffic. To reduce this cost, Citrix Workspace app buffers rapid palette changes, and updates the real palette only every few seconds.

Incorrect display

Citrix Workspace app uses EUC-JP or UTF-8 character encoding for Japanese characters, while the server uses SJIS character encoding. Citrix Workspace app does not translate between these character sets. This issue can cause problems displaying:

  • files that are saved on the server and viewed locally
  • files that are saved locally and viewed on the server

This issue also affects Japanese characters in parameters used in extended parameter passing.

Session span

Full-screen sessions span all monitors by default, but a command-line multi-monitor display control option, -span, is also available. It allows full-screen sessions to span extra monitors.

Desktop Viewer toolbar functionality allows you to switch a session between windowed and full screen session window, including multi-monitor support for the intersected monitors.


Span has no effect on Seamless or normal windowed sessions (including those sessions in maximized windows).

The - span option has the following format: -span [h][o][a|mon1[,mon2[,mon3, mon4]]]

If h is specified, a list of monitors is printed on stdout. If h is the whole option value, wfica exits.

If o is specified, the session window has the override-redirect attribute.


  • The use of this option isn’t recommended. It’s intended as a last option to use with uncooperative window managers.
  • The session window isn’t visible to the window manager, does not have an icon, and cannot be restacked.
  • It can be removed only by ending the session.

If a is specified, Citrix Workspace app tries to create a session that covers all monitors.

Citrix Workspace app assumes that the rest of the -span option value is a list of monitor numbers:

  • A single value selects a specific monitor.
  • Two values select monitors at the top-left and bottom-right corners of the required area.
  • Four values specify monitors at the top, bottom, left, and right edges of the area.

Assuming o wasn’t specified, wfica uses the _NET_WM_FULLSCREEN_MONITORS message to request an appropriate window layout from the window manager, if it is supported. Otherwise, it uses size and position hints to request the desired layout.

The following command can be used to test for window manager support: xprop -root | grep \_NET\_WM\_FULLSCREEN\_MONITORS

If there is no output, there is no support. If there is no support, you might need an override-redirect window. You can set up an override-redirect window using -span o.

To make a session that spans extra monitors from the command line:

  1. At a command prompt, type:

    /opt/Citrix/ICAClient/wfica -span h

    A list of the numbers of the monitors currently connected to the user device is printed to stdout and wfica exits.

  2. Make a note of these monitor numbers.

  3. At a command prompt, type:

    /opt/Citrix/ICAClient/wfica -span \[w\[,x\[,y,z\]\]\]

    The w, x, y, and z values are monitor numbers from step 1 of the preceding steps. The single value w, specifies a specific monitor. Two values w and x specify monitors at the top-left and bottom-right corners of the required area.Four values w, x, y, and z specify monitors at the top, bottom, left, and right edges of the area.


    • Define the WFICA_OPTS variable before starting self-service through a browser. To defin this variable, edit your profile file, normally found at $HOME/.bash_profile or $HOME/.profile, adding a line to define the WFICA_OPTS variable. For example:

      export WFICA_OPTS="-span a"

    • This change affects both virtual apps and desktops sessions.
    • If you have started self-service or storebrowse, remove processes that are started for the new environment variable to take effect. Remove them with:

    killall AuthManagerDaemon ServiceRecord storebrowse

Local applications

You might not escape from a full-screen session to use local applications or another session. This issue occurs because the client-side system UI is hidden and the Keyboard Transparency feature disables the usual keyboard command, for example Alt+Tab, sending the command to the server instead.

As a workaround, use CTRL+F2 to clear the Keyboard Transparency feature temporarily until the focus next returns to the session window. An alternative workaround is to set TransparentKeyPassthrough to No in $ICAROOT/config/module.ini. This workaround disables the Keyboard Transparency feature. However, you might have to override the ICA file by adding this setting in the All_regions.ini file.

Improved error messages

Previously all error messages were having a default error code and a description that isn’t specific to the error. Starting with Citrix Workspace app version 2309, the error messages are improved to include the Error code, Transaction ID, and Description fields specific to the error. These error messages appear when a session starts using ICA launch or when a session starts with the Service Continuity feature enabled.

For example, if there is a session launch failure, the following error message is displayed:

Session launch failure


Updating the default webcam

Currently, webcam redirection in Citrix Workspace app for Linux supports only one webcam at a time. The default webcam selected is mapped to the device path /dev/video0 which is, generally, the built-in webcam in laptops.

To list all devices with video capabilities in the system, you must install v4l tools using the following command:

sudo apt-get install v4l-util

List the video devices using the following command:

v4l2-ctl --list-devices

You might receive an output as follows:

user@user-pc:~ $ v4l2-ctl --list-devices
UVC Camera (046d:09a6) (usb-0000:00:14.0-1):
Integrated Camera: Integrated C (usb-0000:00:14.0-8):

As per the preceding example, there are two webcams. You can use any of them. Citrix recommends using the first index. There is a known issue with Ubuntu, so that you might see multiple indexes for one webcam. In this example, you can use /dev/video0 and /dev/video2.

To set another capture video as default, do the following:

  1. Navigate to the ~/.ICAClient/wfclient.ini configuration file and edit it.
  2. In the [WFClient] section, add the following setting.

    HDXWebCamDevice=<device path>

For example, add HDXWebCamDevice=/dev/video2 to set the webcam mapped to /dev/video2 in a system.

Testing capabilities

On the client, the webcam redirection module can be used in different modes to test isolated components under customer environment conditions.

Production and debug mode

This mode compares the video displaying on the VDA side and the actual buffers that the encoder produces on the client side. It allows to test the entire pipeline.

To enable this mode:

  1. Navigate to the ~/.ICAClient/wfclient.ini configuration file and edit it.
  2. Set the HDXWebcamDebug value to True.

    HDXWebcamDebug = True

After this mode is enabled, the encoder generates the following files with the buffers, depending on the encoder used:

  • For H264 encoder: /tmp/file_mode_buffers.h264
  • For Theora encoder: /tmp/file_mode_buffers.theora

The following diagram describes the production and debug mode:

Image of production and debug mode

Webcam tester mode

This mode allows you to test the webcam isolated from the rest of the pipeline elements.

./gst_read --buffers | -b BUFFERS_AMOUNT  [ --input_device | -i WEBCAM_DEVICE; default=/dev/video0]

To enable to webcam tester mode, run the following commands from the command lines:

   cd /opt/Citrix/ICAClient/util
   `$./gst_read -b 100 /dev/video0

After this mode is enabled, a video preview appears and creates the following file with the raw buffers from the webcam:


The only switch required for webcam tester mode is the --buffers (-b) options. You can also specify the webcam device to test. For example, see the following:

  • ./gst_read -buffers 150
  • ./gst_read –buffers 100 –input_device /dev/video2

The following diagram describes the webcam tester mode:

Image of webcam tester mode

Encoder tester mode

This mode allows you to test the encoder isolated from the pipeline.

./gst_read --output_file | -o FILE_NAME [ --buffers | -b BUFFER_AMOUNT; default=10 0 ]  [ --enableH264  | -e ]

To enable the encoder tester mode, run the following commands from the command lines:

cd /opt/Citrix/ICAClient/util
./gst_read -o ~/file_buffers.h264 -e

The only switch required for this mode is the --output_file (-o) options. You can also test Theora or H264 encoders and the amount of buffer to generate. For example, see the following:

  • For H264: ./gst_read –output_file ~/file_buffers.h264 –buffers 200 –enableH264
  • For Theora: ./gst_read -o ~/file_buffers.theora -b 100

The following diagram describes the encoder tester mode:

Image of encoder tester mode

H264 software encoder

If the software-based H264 encoder does not work correctly, you must verify its dependencies using the following steps:

  1. Verify if the x264 GStreamer plug-in is in the system as part of gstreamer-plugins-ugly. If it is available in the library, run the following command to verify it:

    gst-inspect-1.0 x264

    Image of x264 `GStreamer` verification

  2. Run the following command to verify the dependencies of the library:

    ldd /usr/lib/x86_64-linux-gnu/gstreamer-1.0/

    Image of library verification

If the file is not present, you must install GStreamer plugins ugly using the following command:

sudo apt-get install gstreamer1

H264 hardware encoder

  1. Verify vaapi GStreamer plug-in is in the system as part of gstreamer1.0-vaapi. If it is available in the library, run the following command to verify it:

    gst-inspect-1.0 vaapi

    Image of `vaapi GStreamer` verification

  2. Run the following command to verify the dependencies of the library:

        ldd /usr/lib/x86_64-linux-gnu/gstreamer-1.0/

    Image of library verification

  3. Resolve any missing dependencies.

To install and configure vaapi, follow the GStreamer vappi installation guide.

Collect internal GStreamer frameworks and gst_read logs

Alternative to regular ICAClient logs, you must collect the logs from the gst_read module.

Do the following to collect the logs:

  1. Open a terminal and run the following commands:

    export GST_DEBUG=2, gst_read_debug:6
    export GST_DEBUG_FILE=~/gst_read.log


    This variable sets the level of logging and the file to store them. In this case, we are setting level 2 for the GStreamer framework and level 7 for the gst_read module. For more information, see the document. It is recommended only to set error and warning levels for the internal GStreamer framework and log level for gst_read.

  2. Download an ICA file of a valid VDA.
  3. On the same terminal, run the following command to start a VDA session:

    cd /opt/Citrix/ICAClient
    ./wfica   <ICA file path>/vda.ica

The gst_read.log file is generated with the internal GStreamer framework and the gst_read logs.

GStreamer pipeline inspections

To see the actual pipelines that the GStreamer framework is creating, do the following:

  1. Create a folder to store the dot files, for example: gstIntPipes.
  2. Open a terminal and export GST_DEBUG_DUMP_DOT_DIR=<Absolute path>/gstIntPipes. This variable indicates to the GStreamer where to store the dot files.
  3. Download an ICA file of a valid VDA.
  4. On the same terminal, run the following commands to start a VDA session:

    cd /opt/Citrix/ICAClient/
    ./wfica <ICA file path>/vda.ica
  5. The directory gstIntPipes includes the dot files. GStreamer generates a dot file for every state change in the pipeline. As a result, you can inspect all the processes of the pipeline creation. The following is an example of the set of dot files:

    Image of dot file

  6. Install a dot file utility to see a visual representation of the pipelines. For example, Graphviz. The following images are examples of good and bad creation of the pipeline:

Pipeline successfully created:

Image of pipeline successfully linked

Pipeline unable to link:

Image of pipeline unable to link


To enlarge the preceding images or any other images, right-click the image, select Open image in new tab, and zoom the browser as required.

As shown in the preceding image, the second pipeline is unable to link the GstCapsFilter element and the GstVaapiEncodeH264 element. The capabilities are never fully negotiated. For more information, see the document.

System diagnostic script for RAVE

We provide a script, to verify whether the system configuration and dependencies are suitable to support Remote Audio Video Extensions (RAVE).


RAVE is an HDX feature to support optimized webcam redirection and Windows Media Player redirection for Citrix VDAs.

Do the following to run the script:

  1. Click to download the script.
  2. Open the terminal in your Linux machine.
  3. Type --help or -h to see the supporting command line arguments.
  4. Type one of the following:

    • -w or --webcam - Use this command to run checks for webcam redirection. This is the default command.
    • -r or --rave - Use this command to run checks for RAVE. A pop-up window playing a h264 test video is displayed.

    The system configuration and dependencies are displayed.


Local browser

When you click a link in a Windows session, the content appears in a local browser. Server-client content redirection is enabled in wfclient.ini. This redirection causes a local application to run. To disable server-client content redirection, see server-client content redirection.

Access published resources

When you access published resources, your browser prompts to save a file. Browsers other than Firefox and Chrome might require configuration before you can connect to a published resource. However, when trying to access a resource by clicking an icon on the page, your browser prompts you to save the ICA file.

Specific browser

If you have problems using a specific web browser, set the environment variable BROWSER to specify the local path and name of the required browser before running setupwfc.

Firefox browser

When you launch desktops or applications in Firefox, if a page is unresponsive, try enabling the ICA plug-in.

ICA plug-in in Firefox

When the ICA plug-in is enabled in Firefox, desktop and application sessions might not start. In this case, try disabling the ICA plug-in.

Configuration errors

These errors might occur if you configured a connection entry incorrectly.

E_MISSING_INI_SECTION - Verify the configuration file: “…”. The section “…” is missing in the configuration file.

The configuration file was incorrectly edited or is corrupt.

E_MISSING_INI_ENTRY - Verify the configuration file: “…”. The section “…” must contain an entry “…”.

The configuration file was incorrectly edited or is corrupt.

E_INI_VENDOR_RANGE - Verify the configuration file: “…”. The X server vendor range “…” in the configuration file is invalid.

The X Server vendor information in the configuration file is corrupt. Contact Citrix.

wfclient.ini configuration errors

These errors might occur if you edited wfclient.ini incorrectly.

E_CANNOT_WRITE_FILE - Cannot write file: “…”

There was a problem saving the connection database; for example, no disk space.

E_CANNOT_CREATE_FILE - Cannot create file: “…”

There was a problem creating a connection database.

E_PNAGENT_FILE_UNREADABLE - Cannot read Citrix Virtual Apps file “…”: No such file or directory.

— Or —

Cannot read Citrix Virtual Apps file “…”: Permission denied.

You’re trying to access a resource through a desktop item or menu, but the Citrix Virtual Apps and Desktops or Citrix DaaS file for the resource isn’t available. Refresh the list of published resources by selecting Application Refresh on the View menu, and try to access the resource again. If the error persists:

  • Check the properties of the desktop icon or menu item
  • Check the Citrix Virtual Apps and Desktops or Citrix DaaS file to which the icon or item refers.


Connection issues

You might also find the following issues.

Close a session

To know whether the server has instructed Citrix Workspace app to close a session, use the wfica program. This program logs when it has received a command to terminate the session from the server.

To record this information through the syslog system, add SyslogThreshold with the value 6 to the [WFClient] section of the configuration file. This setting enables the logging of messages that have a priority of LOG_INFO or higher. The default value for SyslogThreshold is 4 (=LOG_WARNING).

Similarly, to have wfica, send the information to standard error and add PrintLogThreshold with the value 6 to the [WFClient] section. The default value for PrintLogThreshold is 0 (=LOG_EMERG).

For more information on logging, see Logging and for more information on syslog configuration, see syslog configuration.

Configuration file settings

For each entry in wfclient.ini, there must be a corresponding entry in All_Regions.ini for the setting to take effect. Also, for each entry in the [Thinwire3.0], [ClientDrive], and [TCP/IP] sections of wfclient.ini, there must be a corresponding entry in canonicalization.ini for the setting to take effect. See the All_Regions.ini and canonicalization.ini files in the $ICAROOT/config directory for more information.

Published applications

If you have issues running published applications that access a serial port, the application might fail (with or without an error message, depending on the application itself) if the port has been locked by another application. In such circumstances, check that there are no applications that have either temporarily locked the serial port or have locked the serial port and exited without releasing it.

To overcome this problem, stop the application that is blocking the serial port. Regarding UUCP-style locks, there might be a lock file left behind after the application exits. The location of these lock files depends on the operating system used.

Starting Citrix Workspace app

If Citrix Workspace app does not start, the error message “Application default file could not be found or is out of date” appears. The reason might be that the environment variable ICAROOT is not defined correctly. This variable is a requirement if you installed Citrix Workspace app to a non-default location. To overcome this problem, Citrix recommends that you do one of the following:

  • Define ICAROOT as the installation directory.

    To check that the ICAROOT environment variable is defined correctly, try starting Citrix Workspace app from a terminal session. If the error message still appears, it is likely that the ICAROOT environment variable is not correctly defined.

  • Reinstall Citrix Workspace app to the default location. For more information about installing Citrix Workspace app, see Install and set up.

    If Citrix Workspace app was previously installed in the default location, remove the /opt/Citrix/ICAClient or $HOME/ICAClient/platform directory before reinstalling.

Citrix CryptoKit (formerly SSLSDK)

To find the Citrix CryptoKit (formerly SSLSDK) or OpenSSL version number that you’re running, you can use the following command: strings | grep "Citrix SSLSDK"

You can also run this command on AuthManagerDaemon or PrimaryAuthManager

Keyboard shortcuts

If your window manager uses the same key combinations to provide native functionality, your key combinations might not function correctly. For example, the KDE window manager uses the combinations from CTRL+SHIFT+F1 to CTRL+SHIFT+F4 to switch between desktops 13 to 16. If you experience this problem, try the following solutions:

  • Translated mode on the keyboard maps a set of local key combinations to server-side key combinations. For example, by default in Translated mode, CTRL+SHIFT+F1 maps to the server-side key combination ALT+F1. To reconfigure this mapping to an alternative local key combination, update the following entry in the [WFClient] section of $HOME/.ICAClient/wfclient.ini. This setting maps the local key combination Alt+Ctrl+F1 to Alt+F1:
    • Change Hotkey1Shift=Ctrl+Shift to Hotkey1Shift=Alt+Ctrl.
  • Direct mode on the keyboard sends all key combinations directly to the server. They aren’t processed locally. To configure Direct mode, in the [WFClient] section of $HOME/.ICAClient/wfclient.ini, set TransparentKeyPassthrough to Remote.
  • Reconfigure the window manager so that it suppresses default keyboard combinations.

Remote Croatian keyboard

This procedure ensures that ASCII characters are correctly sent to remote virtual desktops with Croatian keyboard layouts.

  1. In the WFClient section of the appropriate configuration file, set UseEUKSforASCII to True.
  2. Set UseEUKS to 2.

Japanese keyboard

To configure the use of a Japanese keyboard, update the following entry in the wfclient.ini configuration file:

KeyboardLayout=Japanese (JIS)

ABNT2 keyboard

To configure the use of an ABNT2 keyboard, update the following entry in the wfclient.ini configuration file:

KeyboardLayout=Brazilian (ABNT2)

Local keyboard

If some keys on the local keyboard do not behave as expected, choose the best-matching server layout from the list in $ICAROOT/config/module.ini.

Windows Media Player

Citrix Workspace app might not have GStreamer plugins to handle a requested format. This issue normally causes the server to request a different format. Sometimes the initial check for a suitable plug-in incorrectly indicates that one is present. This issue is normally detected and causes an error dialog to appear on the server that indicates the Windows Media Player found a problem while playing the file. Retrying the file within the session typically works because Citrix Workspace app rejects the format. And as a result, the server either requests another format or provides the media itself.

In a few situations, there’s no suitable plug-in is detected and the file isn’t played correctly, despite the progress indicator moving as expected in the Windows Media Player.

To avoid this error dialog or failure to play in future sessions:

  1. Temporarily add the configuration option “SpeedScreenMMAVerbose=On” to the [WFClient] section of $Home/.ICAClient/wfclient.ini, for example.

  2. Restart wfica from a self-service that has been started from a terminal.

  3. Play a video that generates this error.

  4. Note (in the tracing output) the mime type associated with the missing plug-in trace, or the mime type that must be supported but does not play (for example, “video/x-h264..”).

  5. Edit $ICAROOT/config/MediaStreamingConfig.tbl. On the line with the noted mime type, insert a ‘?’ between the ‘:’ and the mime type. This setting disables the format.

  6. Repeat steps 2–5 (preceding) for other media formats that produce this error condition.

  7. Distribute this modified MediaStreamingConfig.tbl to other machines with the same set of GStreamer plugins.


Alternately, after identifying the mime type it might be possible to install a GStreamer plugin to decode it.

Script to verify system requirements for Windows Media Player redirection

With the 2307 release, a new bash script is introduced to verify the configuration required for the Windows Media Player redirection feature in the Citrix Workspace app for Linux. This feature helps to reduce troubleshooting time for the Windows Media Player redirection feature. To verify the configuration, you can use the same available at System diagnostic script for RAVE.

Serial port setting

To configure a single serial port, add the following entries in the $ICAROOT/config/module.ini configuration file:



To configure two or more serial ports, add the following entries in the $ICAROOT/config/module.ini configuration file:





This topic includes a list of other common error messages that you might see when using Citrix Workspace app.

An error occurred. The error code is 11 (E_MISSING_INI_SECTION). Please refer to the documentation. Exiting.

When running Citrix Workspace app from the command line, this error usually means the description given on the command line wasn’t found in the appsrv.ini file.

E_BAD_OPTION - The option “…” is invalid.

Missing argument for option “…”.

E_BAD_ARG - The option “…” has an invalid argument: “…”.

Invalid argument specified for option “…”.

E_INI_KEY_SYNTAX - The key “…” in the configuration file “…” is invalid.

The X Server vendor information in the configuration file is corrupt. Create a configuration file.

E_INI_VALUE_SYNTAX - The value “…” in the configuration file “…” is invalid.

The X Server vendor information in the configuration file is corrupt. Create a configuration file.

E_SERVER_NAMELOOKUP_FAILURE - Cannot connect to server “…”.

The server name cannot be resolved.

Cannot write to one or more files: “…”. Correct any disk full issues or permissions problems and try again.

Check for disk-full issues, or permissions problems. If a problem is found and corrected, retry the operation that prompted the error message.

Server connection lost. Reconnect and try again. These files might be missing data: “…”.

Reconnect and retry the operation that prompted the error.

Diagnostic information

If you are experiencing problems using Citrix Workspace app, you might be asked to provide Technical Support with diagnostic information. This information assists this team in trying to diagnose the problem and offer assistance to rectify it.

To obtain diagnostic information about Citrix Workspace app:

  1. In the installation directory, type util/lurdump. It’s recommended that you do this modification while a session is open and if possible, while the issue is occurring.

    A file is generated that provides detailed diagnostic information, which includes version details, the contents of Citrix Workspace app’s configuration files, and the values of various system variables.

  2. Check the file for confidential information before sending it to Technical Support.

Troubleshoot connections to resources

Users can manage their active connections using the Connection Center. This feature is a useful productivity tool that enables users and administrators to troubleshoot slow or problematic connections. With Connection Center, users can manage connections by:

  • Closing an application.
  • Logging off a session. This step ends the session and closes any open applications.
  • Disconnecting from a session. This step cuts the selected connection to the server without closing any open applications (unless the server is configured to close applications on disconnection).
  • Viewing connection transport statistics.